CVE-2026-23117

Source
https://cve.org/CVERecord?id=CVE-2026-23117
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-23117.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-23117
Downstream
Published
2026-02-14T15:09:49.188Z
Modified
2026-02-14T19:59:49.070114Z
Summary
ice: add missing ice_deinit_hw() in devlink reinit path
Details

In the Linux kernel, the following vulnerability has been resolved:

ice: add missing icedeinithw() in devlink reinit path

devlink-reload results in iceinithw failed error, and then removing the ice driver causes a NULL pointer dereference.

[ +0.102213] ice 0000:ca:00.0: iceinithw failed: -16 ... [ +0.000001] Call Trace: [ +0.000003] <TASK> [ +0.000006] iceunload+0x8f/0x100 [ice] [ +0.000081] iceremove+0xba/0x300 [ice]

Commit 1390b8b3d2be ("ice: remove duplicate call to icedeinithw() on error paths") removed icedeinithw() from icedeinitdev(). As a result icedevlinkreinitdown() no longer calls icedeinithw(), but icedevlinkreinitup() still calls iceinithw(). Since the control queues are not uninitialized, iceinithw() fails with -EBUSY.

Add icedeinithw() to icedevlinkreinitdown() to correspond with iceinithw() in icedevlinkreinitup().

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23117.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
c91eee346089e4d287d5a111719e57cac605275e
Fixed
a3d99e2fbf01446d31a0d0dfc46444e915a1f6d4
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
1390b8b3d2bef9bfbb852fc735430798bfca36e7
Fixed
42fb5f3deb582cb96440e4683745017dbabb83d6

Affected versions

v6.*
v6.18
v6.18-rc3
v6.18-rc4
v6.18-rc5
v6.18-rc6
v6.18-rc7
v6.18.2
v6.18.3
v6.18.4
v6.18.5
v6.18.6
v6.18.7
v6.19-rc1
v6.19-rc2
v6.19-rc3
v6.19-rc4
v6.19-rc5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-23117.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.18.2
Fixed
6.18.8

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-23117.json"